PoeBot (b)

Copyright © MegaSecurity

By ?


Informations
Author ?
Family PoeBot
Category Remote Access
Version PoeBot (b)
Language Borland C++
Additional Information
dropped file:
c:\WINDOWS\system32\defragfatz.exe
size: 81,920 bytes 

port: 113 TCP

startup:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run "Windows DLL Loader"
data: C:\WINDOWS\system32\defragfatz.exe 
	
	

tested on Windows XP
January 11, 2006

If you recognize any personal information on this page and wish to have it removed or redacted, please contact us at jplesueur@phrozen.io. We are committed to protecting your privacy in accordance with GDPR regulations.